ACLs on RAG Tools

[ShumaS]

Does the RAG tool in NowAssistSkillKit verify the executing user's permissions for records in the search source using ACLs?

Or are records found in the search source used as sources for the response even if the executing user does not have a Read ACL for those records?

[rpriyadarshy · Accepted solution]

@ShumaS  Behavior of Service now System whether is Non Gen AI Modules or Gen AI Modules - Roles, Permissions and ACLs are always applied - It is Important to Understand which User is executing the Skill or Script. 

if its not there then Just think how big is the data security FLAW is 🙂

Regards

RP